Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ff29dm-_AU5Y4H5iGrWzSj7jJ88.roa
File: Ff29dm-_AU5Y4H5iGrWzSj7jJ88.roa (raw, json)
Hash identifier: fvC1eoPElOUigzjXBYr+YyCI1k6utmbIebEDlbggFoI=
Subject key identifier: 15:FD:BD:76:6F:BF:01:4E:58:E0:7E:62:1A:B5:B3:4A:3E:E3:27:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ff29dm-_AU5Y4H5iGrWzSj7jJ88.roa
Signing time: Thu 15 Sep 2022 02:45:53 +0000
ROA not before: Thu 15 Sep 2022 02:45:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=15FDBD766FBF014E58E07E621AB5B34A3EE327CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:d7:41:34:76:44:26:4b:1e:b3:b9:df:16:
f5:86:dd:78:dd:f8:83:4e:95:07:f7:24:cf:79:e1:
bd:8d:d9:bf:9f:e6:7d:bd:08:45:e4:1a:46:aa:8c:
85:b4:9f:75:5f:0d:ba:a0:22:7e:a5:45:05:74:08:
d6:e5:ba:3f:af:11:28:fe:d6:1a:5f:4c:b6:04:b5:
94:55:04:bf:a3:13:c0:97:97:b9:19:95:1a:2d:56:
3b:8a:31:6f:51:0f:9f:c0:8a:f7:b5:0a:fc:cf:09:
a9:98:f9:52:47:26:0e:a4:be:2d:18:d0:0c:aa:d8:
3a:11:e8:27:2e:a7:c4:4f:54:a7:ea:60:99:83:22:
90:a2:10:02:07:d9:09:c2:f1:74:2b:7b:32:64:c3:
ea:52:a7:bd:70:75:f4:fd:27:0f:ab:bf:23:e9:7e:
e4:d8:76:46:3f:26:ff:dc:5f:ea:ec:f8:97:e1:0c:
7b:42:fb:e3:ae:83:65:5c:92:87:9f:7b:46:7c:e2:
f7:93:a0:19:aa:d0:08:d7:6a:a1:17:34:c1:b9:eb:
54:a7:be:32:d6:2b:fd:2b:24:59:e1:21:b5:bf:9b:
41:29:2c:f2:31:05:b3:19:60:ef:c2:05:b4:9a:c5:
7b:df:41:59:ed:25:4d:2f:b2:62:fa:ed:f7:cf:c5:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FD:BD:76:6F:BF:01:4E:58:E0:7E:62:1A:B5:B3:4A:3E:E3:27:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ff29dm-_AU5Y4H5iGrWzSj7jJ88.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.224.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:68:74:47:95:d2:58:d6:87:09:5a:ee:e3:d3:37:af:66:7e:
e8:43:de:b0:47:66:30:fe:1c:3a:1a:e3:63:c6:13:d6:d2:7e:
3d:c4:e5:86:6a:fb:e9:85:07:0d:97:83:ad:fe:b6:b3:b9:9a:
5f:37:97:02:89:2b:70:f5:a9:b1:85:91:e1:5a:d2:38:17:cd:
f9:5c:14:07:69:62:21:6c:1b:60:ec:ce:be:eb:4f:9a:4f:9d:
dc:a1:50:22:51:40:ad:2f:bf:7c:5b:fe:98:4c:88:97:43:a8:
ca:a6:74:53:c9:51:47:54:cd:9e:75:ef:7f:db:1b:c8:7c:f8:
c7:72:fa:6b:a1:04:e2:5e:f7:3e:01:d9:74:90:bf:8f:5e:03:
99:a1:70:5c:6d:bc:ca:8e:4e:8d:49:38:f9:ce:14:5f:ab:07:
05:a5:da:d3:da:05:ea:ce:1c:ff:38:74:89:b0:2b:d5:27:78:
51:21:95:8a:f0:09:13:12:99:42:f4:6c:78:39:44:df:1b:37:
9f:0e:c1:c3:e3:46:36:32:82:10:61:b1:2c:57:a9:12:bd:f0:
8d:79:8b:24:80:96:ae:da:77:87:ea:5f:4a:d0:a0:84:b8:d5:
c2:df:ad:00:44:db:ca:7b:9f:84:56:91:d1:a2:41:02:09:00:
41:36:63:f7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1NTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE1RkRCRDc2NkZCRjAx
NEU1OEUwN0U2MjFBQjVCMzRBM0VFMzI3Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJLddBNHZEJkses7nfFvWG3Xjd+INOlQf3JM954b2N2b+f5n29
CEXkGkaqjIW0n3VfDbqgIn6lRQV0CNbluj+vESj+1hpfTLYEtZRVBL+jE8CXl7kZ
lRotVjuKMW9RD5/Aive1CvzPCamY+VJHJg6kvi0Y0Ayq2DoR6Ccup8RPVKfqYJmD
IpCiEAIH2QnC8XQrezJkw+pSp71wdfT9Jw+rvyPpfuTYdkY/Jv/cX+rs+JfhDHtC
++Oug2Vckoefe0Z84veToBmq0AjXaqEXNMG561SnvjLWK/0rJFnhIbW/m0EpLPIx
BbMZYO/CBbSaxXvfQVntJU0vsmL67ffPxdhLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFf29dm+/AU5Y4H5iGrWzSj7jJ88wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZmMjlkbS1fQVU1WTRINWlH
cld6U2o3ako4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AeAwDQYJKoZIhvcNAQELBQADggEBAKpodEeV0ljWhwla7uPTN69mfuhD3rBHZjD+
HDoa42PGE9bSfj3E5YZq++mFBw2Xg63+trO5ml83lwKJK3D1qbGFkeFa0jgXzflc
FAdpYiFsG2Dszr7rT5pPndyhUCJRQK0vv3xb/phMiJdDqMqmdFPJUUdUzZ5173/b
G8h8+Mdy+muhBOJe9z4B2XSQv49eA5mhcFxtvMqOTo1JOPnOFF+rBwWl2tPaBerO
HP84dImwK9UneFEhlYrwCRMSmUL0bHg5RN8bN58OwcPjRjYyghBhsSxXqRK98I15
iySAlq7ad4fqX0rQoIS41cLfrQBE28p7n4RWkdGiQQIJAEE2Y/c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org